Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oVqhEsRIJxZ5Xf46P3-wkn4WRaI.roa
File: oVqhEsRIJxZ5Xf46P3-wkn4WRaI.roa (raw, json)
Hash identifier: fYzGBsy5DhcW93uGhCjoojoz9jzwNaIEdF5iDg9K8sU=
Subject key identifier: A1:5A:A1:12:C4:48:27:16:79:5D:FE:3A:3F:7F:B0:92:7E:16:45:A2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34BA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oVqhEsRIJxZ5Xf46P3-wkn4WRaI.roa
Signing time: Mon 10 Feb 2025 13:52:38 +0000
ROA not before: Mon 10 Feb 2025 13:52:38 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13498 (0x34ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:38 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A15AA112C4482716795DFE3A3F7FB0927E1645A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:83:56:57:19:79:55:17:22:9a:cd:31:45:
06:16:76:e4:ee:f9:73:0e:da:0c:6a:f6:14:21:26:
fc:c4:3d:9a:4a:b3:b9:51:76:cb:16:16:1b:84:8b:
f0:48:24:70:fc:ae:4b:bd:2d:ca:ef:5e:8d:65:b9:
02:b2:a8:2d:42:53:47:87:88:b5:e5:e3:f3:6f:13:
f1:55:3d:bc:1a:34:7b:b1:cb:80:04:36:8b:d8:19:
b7:c6:27:25:7e:e9:e1:18:34:da:0e:bc:f2:73:0c:
77:9b:09:88:62:b0:4c:73:5e:31:c2:53:0d:e0:01:
23:59:11:af:4b:fc:a8:3b:3e:8b:6c:5c:b0:ca:28:
3a:af:6d:52:6c:55:2e:ce:02:a9:be:1e:16:34:6a:
be:f3:0e:8c:a8:05:ed:5d:2b:1b:19:30:b1:84:44:
67:ea:54:95:b8:95:80:56:13:f6:ef:08:ab:3f:02:
a2:30:84:60:e1:f2:d4:d3:17:00:a3:6e:3b:5a:ad:
24:40:1d:98:34:5f:ea:28:01:66:ba:03:e4:e9:a2:
93:a1:05:c0:03:ad:b9:67:1f:3f:1b:b1:54:df:1e:
de:cf:34:41:1d:8b:7c:e7:5c:d4:e2:e0:eb:80:23:
40:e2:2a:a5:a8:95:9f:30:63:fc:a7:eb:7e:15:5a:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5A:A1:12:C4:48:27:16:79:5D:FE:3A:3F:7F:B0:92:7E:16:45:A2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oVqhEsRIJxZ5Xf46P3-wkn4WRaI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.80.0/21
Signature Algorithm: sha256WithRSAEncryption
30:73:f7:bc:49:3a:3d:54:3a:f2:cb:d3:6a:30:43:09:ab:d2:
53:9c:ac:4d:1c:1e:6d:73:aa:68:1e:91:bd:cb:31:e4:b3:49:
22:46:15:fa:c7:83:45:7a:fb:1a:b8:d4:87:00:83:a0:bb:c3:
c6:3c:15:60:59:aa:f1:ba:b4:76:4e:e6:67:0f:48:7b:b5:cc:
0d:67:c8:f4:12:d2:94:a1:d8:64:ff:3d:57:0f:cf:e7:d5:1a:
30:57:16:c7:8c:22:9a:7f:55:d2:cc:d1:63:0c:21:d5:75:75:
ff:f7:67:a5:a3:32:60:6f:2d:1a:dc:d1:3e:f2:bd:eb:3e:3a:
f3:81:fc:22:74:9d:2d:7d:5d:7b:fe:9d:1a:c6:6a:7d:a2:4f:
b0:ab:98:fd:35:56:fa:5c:2c:33:d7:0d:bb:74:3e:b4:02:f2:
26:93:88:2d:69:37:90:48:2c:2e:7a:59:1a:83:3a:5a:55:6d:
0a:77:b5:f6:d4:37:14:25:e4:d6:74:91:27:ed:8a:02:dc:0c:
ea:6b:e7:40:4b:05:7b:83:84:a5:2d:28:d2:77:8e:2a:62:a8:
03:7f:58:29:c5:b4:82:f0:dc:26:e7:5c:c1:de:de:58:4f:20:
e4:69:ba:4c:27:12:dc:83:e7:89:e8:30:f0:ed:dc:e3:e3:22:
2d:cc:6e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:16 2025 by rpki-client